Vulnerability in Openstack Essex

CVE-2012-3542

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative…

EPSS: 0.025 (82.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References